VULNERABILITY INTELLIGENCE
CVE-2008-7264
CVSS score4 MEDIUM
EPSS probability1.35%
CISA KEVNot currently listed
Published2010-10-19
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:S/C:N/I:N/A:P
Description
The ftp_QUIT function in ftpserver.py in pyftpdlib before 0.5.0 allows remote authenticated users to cause a denial of service (file descriptor exhaustion and daemon outage) by sending a QUIT command during a disallowed data-transfer attempt.
Weakness classification
- CWE-20: Improper Input Validation